Re: Canonical list of Python security vulnerabilities

2023-07-15 Thread Bob Kline via Python-list
On Sat, Jul 15, 2023 at 1:02 PM Dieter Maurer wrote: > > I am active in the `Zope` community (a web application server > based on Python). This community has a security mailing list > for security related reports > and issues public CVE (= "Commun Vulnerabilities and Exposures") reports > (via a

Re: Canonical list of Python security vulnerabilities

2023-07-14 Thread Bob Kline via Python-list
On Fri, Jul 14, 2023 at 3:02 PM Barry wrote: > Where do you get your python from? Directly from python.org. > You may find that the organisation that packages python that you use has such > a list. That's my hope. Just haven't found it yet. :-} --

Re: Canonical list of Python security vulnerabilities

2023-07-14 Thread Bob Kline via Python-list
On Fri, Jul 14, 2023 at 1:35 PM Bob Kline wrote: > Can someone point me to the official catalog of security vulnerabilities > in Python I did try entering "python security vulnerabilities" in the search box of the python.org web site, but what I got back was "No results found." --

Canonical list of Python security vulnerabilities

2023-07-14 Thread Bob Kline via Python-list
Can someone point me to the official catalog of security vulnerabilities in Python (by which I mean cpython and the standard libraries)? I found https://www.cvedetails.com/vulnerability-list/vendor_id-10210/product_id-18230/Python-Python.html but that isn't maintained by python.org. I also found